Open-source alternatives to Screwdriver

Earthly is a containerized build system and Docker build framework designed for creating reproducible build pipelines. It ensures environment consistency by executing every build step inside an isolated container, combining the isolation of container images with dependency tracking and parallel execution. The system differentiates itself through a focus on hermeticity and multiplatform support, allowing for the generation of container images targeting multiple CPU architectures within a single execution flow. It maintains a hermetic build environment by isolating network access and utilizing

This project is a cloud-native identity and access management platform designed to centralize authentication, authorization, and identity lifecycle management. It functions as a standards-compliant OpenID Connect authorization server, providing secure session management and token issuance for web, mobile, and device-based applications. The platform is built to handle complex identity requirements through stateless token authentication and support for modern passwordless methods, including biometrics and hardware keys. What distinguishes this platform is its native support for multi-tenant env

InsForge is a backend-as-a-service platform that provides an integrated suite of tools for managing relational databases, identity provision, object storage, and serverless compute. It functions as an open-source identity provider and a PostgreSQL database manager featuring integrated vector storage and row-level security. The platform serves as an LLM orchestration gateway, offering a unified endpoint to route requests across various AI providers through an OpenAI-compatible interface. It enables AI-driven application generation and connects AI agents to backend resources using a standardize

Casdoor is a centralized identity and access management platform that functions as an OAuth 2.0 authorization server. It provides a comprehensive suite of services for managing user identities, authentication sessions, and access policies across both web and machine-to-machine applications. Built with a decoupled frontend-backend architecture in Go, the platform supports high-concurrency environments and offers a web-based management interface for administrative tasks. The platform distinguishes itself through its extensive support for federated identity management, allowing integration with

CodeIgniter is a PHP web framework built on the Model-View-Controller pattern, designed for building full-stack web applications. It provides a lightweight toolkit with minimal configuration, organizing application logic into controllers, models, and views for clean separation of concerns. The framework includes a fluent query builder for constructing SQL statements programmatically, PSR-4 autoloading with namespace mapping, and a service-based dependency injection container for managing shared class instances. The framework distinguishes itself through its comprehensive set of built-in tools

Pulumi is an infrastructure-as-code framework that enables the definition, deployment, and management of cloud resources using general-purpose programming languages. It functions as a cloud resource orchestrator that coordinates the lifecycle of heterogeneous infrastructure by executing code to construct dependency graphs and reconciling the desired state against actual cloud environments. The platform distinguishes itself through a language-host runtime bridge that allows developers to use standard programming languages to define infrastructure, rather than relying solely on domain-specific

This project is an educational platform and curriculum designed to teach cloud-native engineering, infrastructure automation, and software delivery practices. It provides a structured roadmap for mastering core competencies, including container orchestration, GitOps workflows, and continuous integration and delivery. The platform distinguishes itself by combining technical training with professional career development. It offers hands-on projects, mentored simulations, and technical proficiency assessments that mirror real-world engineering environments. Users can progress through sequential

This project provides a comprehensive architectural blueprint and implementation set for building a platform-as-a-service on Kubernetes. It serves as a technical resource for deploying container orchestration environments, managing the full software development lifecycle, and integrating a complete DevOps toolchain. The implementation emphasizes automated software delivery through the integration of build and delivery pipelines, private container registries, and distributed configuration systems. It enables the decoupling of application settings from images via a centralized configuration man

Tinyauth is an authentication middleware service and identity provider that verifies user identities to grant system access. It operates as a standalone server or as an authentication gateway, utilizing a reverse proxy model to intercept requests and validate credentials before traffic reaches protected backend services. The project functions as an OpenID Connect provider for single sign-on experiences and an OAuth 2.0 gateway that delegates verification to external providers such as Google and GitHub. It also acts as an LDAP authentication server, allowing for centralized user management and

This project is a game decompilation project consisting of a reconstructed C source codebase and the systems used for binary reconstruction. It provides a human-readable version of a commercial game title created through static and dynamic analysis to facilitate technical study and modification. The project utilizes a containerized build environment to ensure reproducible compilation and consistent toolchain versions across different host operating systems. It includes a game binary reconstructor that translates original machine code into source code and a system for compiling the codebase in

Sa-Token is a Java-based authentication and authorization framework designed to manage user sessions, permissions, and identity verification within web applications and microservice architectures. It provides a centralized security layer that enforces access control policies and identity validation across distributed service environments and API gateways. The framework distinguishes itself through its support for cross-domain single sign-on and its ability to function as an OAuth2 identity provider. It manages user session lifecycles by applying configurable rules for single or multi-login re

CDS is a containerized continuous delivery platform and DevOps automation engine designed to orchestrate software build and deployment pipelines from version control to production. It functions as a pipeline-as-code framework, allowing deployment sequences and environment configurations to be defined via version-controlled files and reusable templates. The platform distinguishes itself through enterprise-scale capabilities, such as dynamically spawning worker nodes across clusters to handle high volumes of concurrent builds and the ability to provision ephemeral containerized services, like d

Octobox is a web-based GitHub notification manager and API client designed to filter, triage, and archive repository alerts. It functions as a self-hosted productivity tool and OAuth application that connects to either GitHub cloud or Enterprise instances. The project distinguishes itself through a developer-centric triage workflow, utilizing a comprehensive set of keyboard shortcuts for rapid navigation and notification archiving without mouse usage. It organizes alerts into threaded conversation views and provides a dedicated interface for reducing notification noise. The system provides a

This repository serves as a comprehensive collection of reference implementations for the Remix web framework. It provides practical examples of full-stack web development, demonstrating how to build dynamic, server-rendered applications that bridge server-side logic with client-side interactivity. By leveraging a component-based architecture, these examples illustrate core patterns for managing data, routing, and user interfaces within a unified development environment. The collection highlights the framework's distinctive approach to web architecture, emphasizing server-side data loading an

Open-event-server is a comprehensive event management platform designed to coordinate conferences and meet-ups through a centralized administrative dashboard. It provides a unified system for organizing speaker schedules, managing session details, and overseeing the logistical execution of events from planning to completion. The platform distinguishes itself by integrating secure financial gateways to process registration fees and attendee transactions directly within the application interface. It also features an authentication service that delegates user verification to external social medi

Woodpecker is a self-hosted continuous integration server that automates building, testing, and deploying code changes triggered by repository events. It connects to a code forge to trigger pipelines on events and authenticate users, with pipelines defined in YAML files stored in the repository for version-controlled, declarative CI/CD configuration. Each pipeline step runs in an isolated Docker container, ensuring reproducible builds and clean environments with step-level resource isolation. The system uses webhook-driven event triggering from code forge events, and supports a multi-architec

Travis CI is a continuous integration platform and CI/CD pipeline orchestrator that automates the testing and building of code changes from version control systems. It functions as a multi-language test runner and build infrastructure manager, ensuring software quality through automated testing across various programming languages and runtimes. The platform is distinguished by its use of virtual-machine-based isolation for reproducible environments and a configuration-driven approach to pipeline generation. It supports complex testing strategies through parallel matrix execution, allowing job

Cyclops is a Helm template orchestrator and management interface used to configure and deploy containerized applications to Kubernetes clusters. It serves as a deployment tool that abstracts complex infrastructure configurations into simplified inputs, allowing users to manage applications through a dedicated user interface. The project differentiates itself by using schema-driven form generation and metadata-driven UI rendering to create self-service deployment portals. These interfaces are generated by parsing template files and their associated schemas, mapping specific attributes to visua

Markdown Resume is a command-line utility designed to transform structured text files into professional, responsive web pages and portable documents. It functions as a static site generator that separates content from presentation, allowing users to maintain version-controlled resumes through a template-driven build system. The project distinguishes itself by providing a containerized execution environment that ensures consistent document output across different host systems. It supports rapid design iteration through a live preview feature that monitors source files and triggers automatic re

TheHive is a security incident response platform and multi-tenant case management system. It functions as a Security Orchestration, Automation, and Response (SOAR) tool and a threat intelligence platform designed to coordinate security investigations by managing alerts, cases, and observables. The platform is distinguished by its multi-tenant architecture, which isolates data across different organizations while supporting selective cross-tenant sharing. It features a SOAR automation engine capable of executing sandboxed JavaScript logic to automate workflows and trigger response actions thro

ZenML is an orchestration platform designed for building, deploying, and monitoring reproducible machine learning pipelines and agentic workflows. It provides a unified framework that manages the entire lifecycle of machine learning assets, from data processing and model training to the deployment of persistent inference services. By decoupling pipeline logic from underlying compute and storage, the platform enables teams to transition workflows seamlessly from local development environments to production-grade cloud infrastructure. The platform distinguishes itself through a service-oriented

ZenML is an extensible machine learning orchestration framework designed to manage the end-to-end lifecycle of data pipelines and AI agent workflows. It functions as a durable orchestrator that executes machine learning tasks as directed acyclic graphs, ensuring that every step is containerized for consistent performance across local, cloud, and hybrid infrastructure. By decoupling pipeline code from underlying compute and storage backends, the platform allows developers to define infrastructure-agnostic stacks that remain portable across diverse environments. The project distinguishes itself

This project is a comprehensive educational repository designed to teach DevOps practices through structured learning paths and hands-on exercises. It focuses on mastering infrastructure management, container orchestration, and system administration by providing a curriculum that covers the full lifecycle of cloud-native environments, from initial provisioning to ongoing maintenance and security. The repository distinguishes itself by offering a practical, task-based approach to complex operational domains. It guides users through the implementation of infrastructure-as-code, the configuratio

Dagger is a programmable CI/CD engine and containerized task runner designed to orchestrate build and test pipelines. It functions as an incremental build system that manages containers, filesystems, and secrets through a typed API to ensure consistent execution across local and cloud environments. The engine utilizes a language-agnostic client-server API to allow multi-language pipeline orchestration, enabling the sharing of typed artifacts and state across different SDKs without manual serialization. It optimizes execution through content-addressable caching and a directed acyclic graph to

Kilocode is an autonomous engineering platform designed to orchestrate AI agents for complex software development tasks. It functions as a comprehensive system for automating coding, testing, and repository management by integrating directly with your codebase and terminal. The platform provides a unified gateway for model orchestration, allowing for the management of agentic workflows, event-driven automation, and persistent session state across distributed development environments. The platform distinguishes itself through its federated task management and policy-based access control, which

This project is a centralized identity and access management platform that functions as a single source of truth for user authentication. It enables organizations to manage user sessions and enforce security policies across multiple connected client applications through a unified service. The platform distinguishes itself by utilizing the Central Authentication Service protocol to facilitate secure identity exchange. It provides a dedicated management interface for registering client applications and defining specific access permissions, while also supporting integration with external social

CloudSaver is a multi-cloud file transfer manager and storage aggregator designed to discover remote resources and save them directly to cloud drives. It functions as a cloud file downloader and management platform that enables the movement of data between different cloud storage providers without requiring files to be downloaded to a local device first. The system uses OAuth authentication to manage secure connections to third-party cloud drives, facilitating direct server-to-server data transfers. It incorporates asynchronous streaming to move data between remote sources and destinations, p